Honestly, from what I know of the libwebp vulnerability, and how many things are affected and how unclear it is which things those are, I feel like the only effective advice for 'normal' computer users at this time is "do not use your computer". But good luck getting that to fly :/